@daphnek.bsky.social European Data Protection Board did (in their guidelines about CCTV systems, but I think it could also be used for photos): https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-32019-processing-personal-data-through-video_en